Transient Echnida publication issue

[padenot]

See this run: https://github.com/w3c/webcodecs/runs/2683472964?check_suite_focus=true#step:3:162 (https://labs.w3.org/echidna/api/status?id=6a05c4fc-00b8-4a58-8128-bbf5626ed7b7 is the echnida log). I did a few retriggers here and there, and it's someone random.

Looks like some IPs from github are not whitelisted? @tidoust Is this known?

[tidoust]

Ping @deniak and @jennyliang220.

[deniak]

That's odd! Echidna tries to fetch all the github actions IPs from their API: https://api.github.com/meta.
As I'm writing this, 20.98.226.174 isn't part of the actions list.
I'll send an email to the GitHub support to see if there's any reason that IP isn't listed there.

[deniak]

The support finally replied and here's their answer.

Ahh sorry about that, I believe this is possible because the API is updated once a week for these IP addresses, we mention that here:

https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners#ip-addresses

So I think after the next update, that IP address should be covered in the API.

The Azure IP addresses are available here:

https://www.microsoft.com/en-us/download/details.aspx?id=56519

And I believe this information shouldn't have the same lag if you need more up-to-date IP addresses.

We are currently relying on the github API to fetch the list of IPs but the list isn't as reliable as we'd thought.

[tidoust]

This was fixed a long time ago. Closing...